
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
File: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft (raw, json)
Hash identifier: +EcSiBJ1dnnAgyptt2T2czyQinNcVX7YDlA/6V3O87M=
Subject key identifier: 5E:C1:BA:8B:41:3B:E5:08:51:28:C1:F4:C1:00:B6:A3:00:D5:76:9E
Authority key identifier: 4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
Certificate issuer: /CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Certificate serial: 234E1C879119406879ACDAC33805171D68E1C217
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 17:43:22 +0000
Manifest this update: Mon 20 Jul 2026 17:38:22 +0000
Manifest next update: Tue 21 Jul 2026 20:13:22 +0000
Files and hashes: 1: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl (hash: mvmZnmhRwcmk5FPq3sJALc637QKjNqf6I0LHccqX+PA=)
2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: crz5wQlV27LIwISEyXo4hYXR+StXchnW3rusJFfd1fY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 20:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:4e:1c:87:91:19:40:68:79:ac:da:c3:38:05:17:1d:68:e1:c2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Validity
Not Before: Jul 20 17:38:22 2026 GMT
Not After : Jul 21 20:13:22 2026 GMT
Subject: CN=5EC1BA8B413BE5085128C1F4C100B6A300D5769E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:85:be:50:3f:df:8a:c4:81:8d:a2:4a:fd:
51:5b:6b:e5:58:d9:90:50:22:31:9e:d5:3f:ba:50:
17:27:12:dd:49:18:10:c0:c6:21:16:90:28:78:a0:
cb:d4:f6:8c:87:ef:a9:66:51:75:50:1f:8d:76:9a:
19:fe:ca:cd:4a:93:3d:8a:2b:7a:ea:e2:89:b5:0a:
3f:bc:da:1f:e8:04:76:1e:2b:43:be:61:7f:d2:87:
5d:88:74:10:93:b3:c5:8e:19:58:0a:5b:96:50:0f:
bf:18:b6:40:ab:16:c2:88:24:61:5f:2f:2b:6e:52:
63:ae:19:93:bd:f9:73:2c:4f:78:e4:0f:18:4d:3a:
85:ef:75:80:27:17:85:bc:5e:b2:3b:ff:d8:9a:8b:
72:79:17:97:35:22:9a:e7:25:0a:a1:88:a4:50:80:
7f:4e:f0:5b:d1:d5:55:df:15:1f:8d:48:1d:d4:1d:
69:25:14:29:d5:8d:8e:1e:a3:2b:6b:c9:3a:b2:e6:
b5:e7:97:58:82:a8:57:da:2c:04:86:ef:77:6c:30:
df:0f:00:db:87:78:11:c4:e0:28:6c:57:25:38:20:
f4:39:dc:18:25:ed:2b:08:f7:8d:05:c1:d2:c9:35:
fb:e0:c9:c9:ee:1a:9a:9b:58:8d:ed:8d:53:8b:3c:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C1:BA:8B:41:3B:E5:08:51:28:C1:F4:C1:00:B6:A3:00:D5:76:9E
X509v3 Authority Key Identifier:
keyid:4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ac:62:4c:c1:62:81:7d:0a:79:a9:8f:00:2b:f0:cf:9f:b8:
b7:9b:e3:a9:f4:ec:45:55:52:94:db:7a:f6:8b:84:fa:ec:2f:
da:87:83:85:14:1b:5e:37:19:61:bd:38:5a:16:43:49:28:d5:
47:96:c8:ad:ec:55:58:e2:58:be:1d:ad:89:6a:81:88:92:20:
b7:e2:af:23:ee:df:da:a9:05:5f:af:66:95:df:6e:40:08:f2:
07:ca:b4:5e:d8:27:40:63:c2:04:7d:3a:9c:3d:f1:1c:14:74:
80:cc:39:ac:0b:2f:17:75:2c:b3:3d:70:68:f7:ba:01:c3:9b:
24:b8:e2:f5:43:6a:4f:96:b6:e4:fd:b8:5c:d4:77:dd:72:00:
91:6a:89:67:6c:47:a1:78:74:7b:6a:01:9d:d7:16:c7:cc:f2:
a8:ef:70:51:c3:fa:61:7d:57:e7:70:4c:df:62:50:b4:44:9e:
f5:69:a2:0c:d1:f3:f7:3c:c9:fd:a2:d9:d4:1d:ef:07:44:ac:
c0:62:23:4e:78:65:7b:ed:3b:63:81:f9:d7:16:ec:e3:d4:62:
ea:85:c6:7c:77:2f:66:eb:62:5b:52:3e:f2:4a:86:08:7d:7e:
0a:6b:65:97:62:12:b3:9c:41:09:07:4e:53:4b:3d:be:92:c0:
4b:4f:a1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:42:32 2026 by rpki-client